#!/bin/sh

set -e

grep -qs boot=live /proc/cmdline || exit 0
grep -qs iptables /proc/cmdline || exit 0

case "${1}" in
	start)
		echo 1 > /proc/sys/net/ipv4/ip_forward

		iptables -N block

		iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
		iptables -A block -m state --state NEW -i ! eth0 -j ACCEPT
		iptables -A block -j DROP
		iptables -A INPUT -j block
		iptables -A FORWARD -j block
		;;
esac
